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1 Trusted paths for browsers 
m± Zishuang (Eileen) Ye, Sean Smith, Denise Anthony 

^ May 2005 ACM Transactions on Information and System Security (TTSSEC), volume 8 

Issue 2 

Publisher: ACM Press 

Full text available: ^.p.dfi265»3Z.jKB) Additional Information: MLeMiQn, abstract jefgrences, iadexlerma 

Computer security protocols usually terminate in a computer; however, the human-based 
services which they support usually terminate in a human. The gap between the human 
and the computer creates potential for security problems. We examine this gap, as it is 
manifested in secure Web servers. Felten et al. demonstrated the potential, in 1996, for 
malicious servers to impersonate honest servers. In this paper, we show how malicious 
servers can still do this— and can also forge the existence of an ... 

Keywords: HCISEC, Trust path, Web browser security 



2 Fast detection of communication patterns in distributed executions 
Thomas Kunz, Michiel F. H. Seuren 

November 1 997 Proceedings of the 1997 conference of the Centre for Advanced 

Studies on Collaborative research 
Publisher: IBM Press 

Full text available: ^|j pdft4.21 MB) Additional Information: full citation, abstract, references, index terms 

Understanding distributed applications is a tedious and difficult task. Visualizations based 
on process-time diagrams are often used to obtain a better understanding of the 
execution of the application. The visualization tool we use is Poet, an event tracer 
developed at the University of Waterloo. However, these diagrams are often very complex 
and do not provide the user with the desired overview of the application. In our 
experience, such tools display repeated occurrences of non-trivial commun ... 



3 A secure^ 
^ Pino Persiano, Ivan Visconti 

>^ November 2003 ACM Transactions on Information and System Security (TISSEC), 

Volume 6 Issue 4 

Publisher: ACM Press 

Full text available: 1Bpdffg41,65 KB) Additional Information: full citation, abstract, references, index terms 
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In this paper we study privacy issues regarding the use of the SSI7TLS protocol and 
X.509 certificates. Our main attention is placed on subscription-based remote services 
(e.g., subscription to newspapers and databases) where the service manager charges a 
flat fee for a period of time independent of the actual number of times the service is 
requested.We start by pointing out that restricting the access to such services by using 
X.509 certificates and the SSL/TLS protocol, while preserving the in ... 

Keywords: Access control, anonymity, cryptographic algorithms and protocols, privacy, 
world-wide web 



4 WME: towards a web for mathematics education H 
Paul S. Wang, Norbert Kajler, Yi Zhou, Xiao Zou 

^ August 2003 Proceedings of the 2003 international symposium on Symbolic and 
algebraic computation 
Publisher: ACM Press 

Full text available: ^pdf(J.33J9„KBj Additional Information: ftj!!.crtat|pn J abstract, references, index terms 

Reported is an approach for Web-based Mathematics Education (WME). The WME 
framework is a distributed system that aims to create a Web for mathematics education. 
Components of the WME framework include the Mathematics Education Markup Language 
(MeML) for page markup, regular Web servers to deliver pages, WME Page Processors to 
enable common Web browsers to receive MeML pages, and a variety of WME services 
(mathematical and educational) to supply power and interactivity to Me ... 

Keywords: MeML, WME, education, markup, mathematics, mathematics education 
markup protocol, mathematics education service language, web, web-based mathematics 
education 

5 XML: XVM: a bridge between xm! data and its behavior Q 
Quanzhong Li, Michelle Y. Kim, Edward So, Steve Wood 

^ May 2004 Proceedings of the 13th international conference on World Wide Web 

Publisher: ACM Press 

Full text available: ^pdfl377.3S KB) Additional Information: fuii citation, abstract, references, index terms 

XML has become one of the core technologies for contemporary business applications, 
especially web-based applications. To facilitate processing of diverse XML data, we 
propose an extensible, integrated XML processing architecture, the XML Virtual Machine 
(XVM), which connects XML data with their behaviors. At the same time, the XVM is also a 
framework for developing and deploying XML-based applications. Using component-based 
techniques, the XVM supports arbitrary granularity and provides a high ... 

Keywords: XML, XML applications, XML processing, XVM, components, web applications 



Computing curricula 2001 

September 2001 Journal on Educational Resources in Computing (JERIC) 
Publisher: ACM Press 

Full text available: @y(613^3 KB) Addjtiona| lnformation: m cit ation. references, citings, index terms 
[S3 ..bto.[(2 ,78 .KB jt 
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September 1999 ACM Computing Surveys (CSUR), Volume 31 issue 3 
Publisher: ACM Press 

Additional Information: full citation, abstract, references, citings, index 



Full text available: f||pdft524.80 KB) 

* * terms 

The exponential growth and capillar diffusion of the Web are nurturing a novel generation 
of applications, characterized by a direct business-to-customer relationship. The 
development of such applications is a hybrid between traditional IS development and 
Hypermedia authoring, and challenges the existing tools and approaches for software 
production. This paper investigates the current situation of Web development tools, both 
in the commercial and research fields, by identifying and characte ... 



Keywords: HTML, Intranet, WWW, application, development 



8 Desjgn^ 

g&! Kaj Gronbaek, Niels Olof Bouvin, Lennert Sloth 

^ April 1997 Proceedings of the eighth ACM conference on Hypertext 
Publisher: ACM Press 

Full text available: Mp.-CiMMBjl Additional Information: McMLQIL nfecsaofes, fiffllias, index terms 



Keywords: ActiveX, Dexter hypertext reference model, HTML, Java, JavaScript, OLE, 
World Wide Web, link objects, open hypermedia service 



9 A Web-based browsing and spatial analysis system for regional natural resource Q 
M anal ysis and mapping 

: ™ Ranga Raju Vatsavai, Thomas E. Burk, B. Tyler Wilson, Shashi Shekhar 

November 2000 Proceedings of the 8th ACM international symposium on Advances in 

geographic information systems 
Publisher: ACM Press 

Full text available: ^pdfGLMMBl Additional Information: MsMion 4 abstract, jndeAterms 

Proper use and monitoring of our land and environmental resources for quality of life and 
sustainable growth considerations require that timely and accurate data on land cover and 
land use be regularly available. Remote sensing is an appropriate tool and NOAA's 1-km 
AVHRR time series imagery has proven to be an invaluable input for regional level natural 
resource mapping and monitoring. Many previous efforts addressing the use of satellite- 
derived data for land cover and land use classificati ... 
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Keywords: Web GIS, client/server, load balancing 

10 Session 11: design and development methods I: QpenXUP: an alternative approach Q 
tft.deyeJopjnfl.hlgbJy^ 

^ Jin Yu, Boualem Benatailah, Fabio Casati, Regis Saint-Paul 

July 2006 Proceedings of the 6th international conference on Web engineering ICWE 
06 

Publisher: ACM Press 

Full text available: ^p.df(412,92„KBj Additional Information: full citation, abstract, Merences, index terms 

There is an increasing demand in making web user interfaces richer and more interactive. 
Currently, there are two approaches aiming at improving web user interfaces. First, 
downloaded code in form of Java Applet or ActiveX can be executed in browsers. And 
more recently, AJAX (Asynchronous JavaScript + XML) leverages browsers' JavaScript 
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engine to render user interfaces without reloading pages. Both approaches have some 
weaknesses. In this paper, we present an alternative approach to creating high ... 

Keywords: framework, protocol, soap, thin client, toolkit, user interface, web services, 
xml 



11 Web teebo^ B 
M support Location Based Services 

^ Anastasios Ioannidis, Manos Spanoudakis, Panos Sianas, Ioannis Priggouris, Stathes 
Hadjiefthymiades, Lazaros Merakos 

March 2004 Proceedings of the 2004 ACM symposium on Applied computing 
Publisher: ACM Press 

Full text available: * Qpdff2.70.83 KB) Additional Information: full citation, abstract, references, index terms 

Location Based Services can be considered as the most rapidly expanding field of the 
mobile communications sector. The proliferation of the mobile/wireless Internet, the 
constantly increasing use of handheld, mobile devices and positioning technologies and 
the emergence of mobile computing, prepared the grounds for the introduction of this 
new type of services with impressively large application domain and use range. The 
combination of position fixing mechanisms with location-dependent, georgrap ... 

Keywords: Web Services, XML, location based Services 



12 Business-to-business interactions: issues and enabling technologies 
B. Medjahed, B. Benatallah, A. Bouguettaya, A. H. H. Ngu, A. K. Elmagarmid 
May 2003 The VLDB Journal — The International Journal on Very Large Data Bases, 

Volume 12 Issue 1 

Publisher: Springer-Verlag New York, Inc. 

Full text available: *^pdf(556.34 KB) Additional Information: M\oM\Qn 4 abstract, cltinss, index terms 

Business-to-Business (B2B) technologies pre-date the Web. They have existed for at least 
as long as the Internet. B2B applications were among the first to take advantage of 
advances in computer networking. The Electronic Data Interchange (EDI) business 
standard is an illustration of such an early adoption of the advances in computer 
networking. The ubiquity and the affordability of the Web has made it possible for the 
masses of businesses to automate their B2B interactions. However, several issu ... 

Keywords: B2B Interactions, Components, E-commerce, EDI, Web services, Workflows, 
XML 



13 Adapting the web interface: an adaptive web browser 
K. Henricksen, J. Indulska 

January 2001 Australian Computer Science Communications , Proceedings of the 2nd 

Australasian conference on User interface AUIC v 01, volume 23 issue 5 

Publisher: IEEE Computer Society , IEEE Computer Society Press 

Full text available: . JQX (f| 

^.&Qfil£lM6j.™ Additional Information: Ml .citation, abstract, Merences 

Publisher Site 

The growing number of mobile computing devices with diverse characteristics creates a 
requirement for seamless (device independent) access to computing resources of 
distributed systems. One of the most common applications in distributed systems is the 
Web browser, which is not only used to access resources on the Internet but also as an 
interface to many Information Systems applications. In this paper, we address types of 
adaptation that can be applied to a Web browser in response to diverse con ... 
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14 Privacy in browser-based att rib ute exchange Q 

Birgit Pfitzmann, Michael Waidner 
V 7 November 2002 Proceedings of the 2002 ACM workshop on Privacy in the Electronic 
Society 

Publisher: ACM Press 

Full text available: pdf(168.95 KB) Additional Information: full citation, abstract, references, index terms 

Browser-based attribute-exchange protocols enable users of normal web browsers to 
conveniently send attributes, such as authentication or demographic data, to web sites. 
Such protocols might become very common and almost mandatory in general consumer 
scenarios over the next few years. We derive the privacy requirements on such protocols 
from general privacy principles and study their consequences for the protocol design. We 
also survey to what extent proposals like Microsoft's Passport, IBM's e- ... 

Keywords: BBAE, Liberty, Passport, SAML, Shibboleth, attribute-exchange, e-Community 
Single Signon, identity management, privacy, roles, security, single signon, traffic data, 
wallet, web browser 



15 Cojlabprative cuMom 

jMi Makoto Kobayashi, Masahide Shinozaki, Takashi Sakairi, Maroun Touma, Shahrokh Daijavad, 
^ Catherine Wolf 

November 1998 Proceedings of the 1998 ACM conference on Computer supported 
cooperative work 

Publisher: ACM Press 

Full text available: ^.pdJXlJ9.M8j Additional Information: MLcitetjon, references, citings, jndex.terms 



Keywords: CSCW, Weg-collaboration customer services, collaboration architecture, 
synchronous Web brower sharing 



16 A 3D user interface for visualisation of Web-based data-sets 
Iain M. Brown 

^ November 1998 Proceedings of the 6th ACM international symposium on Advances in 
geographic information systems 
Publisher: ACM Press 

Full text available: ffi.pdg650 ; 71. KB) Additional Information: Ml .citation, references, index terms 



Keywords: 3D visualisation, Internet, data-mining, user interface, virtual environments 



1 7 Correctness & security: SecuBat: a web vulnerability scanner 
^ Stefan Kais, Engin Kirda, Christopher Kruegel, Nenad Jovanovic 

May 2006 Proceedings of the 15th international conference on World Wide Web 
WWW 06 

Publisher: ACM Press 

Full text available: " Hp pdf(335.28 KB) Additional Information: full citation, abstract, references, index terms 

As the popularity of the web increases and web applications become tools of everyday 
use, the role of web security has been gaining importance as well. The last years have 
shown a significant increase in the number of web-based attacks. For example, there has 
been extensive press coverage of recent security incidences involving the loss of sensitive 
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credit card information belonging to millions of customers. Many web application security 
vulnerabilities result from generic input validation proble ... 

Keywords: SQL injection, XSS, automated vulnerability detection, crawling, cross-site 
scripting, scanner, security 



18 Extending Java for high-level Web service construction 
^ Aske Simon Christensen, Anders M0ller, Michael I. Schwartzbach 
^ November 2003 ACM Transactions on Programming Languages and Systems 

(TOPLAS), Volume 25 Issue 6 

Publisher: ACM Press 

Additional Information: full citation, abstract, references, citings, index 



Full text available: fB pdtf 947.02 KB) 

^ terms 

We incorporate innovations from the <bigwig> project into the Java language to provide 
high-level features for Web service programming. The resulting language, JWIG, contains 
an advanced session model and a flexible mechanism for dynamic construction of XML 
documents, in particular XHTML. To support program development we provide a suite of 
program analyses that at compile time verify for a given program that no runtime errors 
can occur while building documents or receiving form input, and ... 

Keywords: Interactive Web services, XML, data-flow analysis 

19 Experience^ Q 
with place lab: an open source toolkit for location-aware computing 

^ Timothy Sohn, William G. Griswold, James Scott, Anthony LaMarca, Yatin Chawathe, Ian 
Smith, Mike Chen 

May 2006 Proceeding of the 28th international conference on Software engineering 
ICSE '06 

Publisher: ACM Press 

Full text available: ^ pdfl729.93 KB) Additional Information: full citation, abstract, references, index terms 

Location- based computing (LBC) is becoming increasing important in both industry and 
academia. A key challenge is the pervasive deployment of LBC technologies; to be 
effective they must run on a wide variety of client platforms, including laptops, PDAs, and 
mobile phones, so that location data can be acquired anywhere and accessed by any 
application. Moreover, as a nascent area, LBC is experiencing rapid innovation in sensing 
technologies, the positioning algorithms themselves, and the applicati ... 

Keywords: location-based computing, pervasive computing, software architecture, 
ubiquitous computing 



20 Implementation of a WebDAV-based collaborative distance learning environment 




Changtao qu, Thomas Engel, Christoph Meinel 

October 2000 Proceedings of the 28th annual ACM SIGUCCS conference on User 



services: Building the future 
Publisher: ACM Press 

Full text available: ^s>dfU^Q4.KB) Additional Information: fe8.jpMtiP.O4 references, citings, |ndex.terrns 



Keywords: Java 2 platform enterprise edition, JavaServer pages, collaborative distance 
learning, enterprise JavaBeans, virtual university, web-based distributed authoring and 
versioning 
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